Download to read offline
Uploaded byRaghavendra P.V
Threat modeling
The document outlines a system design for threat modeling focused on securing user data in internet and intranet applications involving point-of-sale and mobile device users. It emphasizes the importance of TLS connections, authentication, authorization processes, and risk ranking of potential threats while recommending architectural updates for improved security. The primary goal is to identify missing security controls and enhance overall system protection.
![Coded Agents – with UiPath SDK + LangGraph [Virtual Hands-on Workshop]](https://cdn.slidesharecdn.com/ss_thumbnails/codedagentsdeck-251215155422-5497c599-thumbnail.jpg?width=640&height=640&fit=bounds)
Threat modeling
- 1.
- 2. Internet / Intranet Users 12 3 4 5 6 7 8 9 0 Point of Sale (POS) Users Mobile Device Users
- 3. Securing User Data TLSSecuring Connection DLL Integration with Third party libraries Web Application/ Mobile Authorized access Intranet Application Third Party Payment Gateway Interface VISA
- 4. Authentication / Authorization Server LDAP ExternalNetwork Database/Log Server Protected Data CenterExternal Network Web Server File Server Internet Users 1 2 3 4 5 6 7 8 9 0 POS Device Mobile Users Load Balancer Securing User Data
- 5. Authentication / Authorization Server LDAP ExternalNetwork Database/Log Server Protected Data CenterExternal Network Web Server File Server Internet Users 1 2 3 4 5 6 7 8 9 0 POS Device Mobile Users Load Balancer TLS Securing Connection TLS TLS
- 6. Authentication / Authorization Server LDAP ExternalNetwork Database/Log Server Protected Data CenterExternal Network Web Server File Server Internet Users 1 2 3 4 5 6 7 8 9 0 POS Device Mobile Users Load Balancer TLS TLS DLL Integration with Third party libraries DLL
- 7. Authentication / Authorization Server LDAP ExternalNetwork Database/Log Server Protected Data CenterExternal Network Web Server File Server Internet Users 1 2 3 4 5 6 7 8 9 0 POS Device Mobile Users Load Balancer TLS TLS DLL Authorized access
- 8. Authentication / Authorization Server LDAP ExternalNetwork Database/Log Server Protected Data CenterExternal Network Web Server File Server Internet Users 1 2 3 4 5 6 7 8 9 0 POS Device Mobile Users Load Balancer TLS TLS DLL Third Party Payment Gateway Interface VISA VISA
- 9. Authentication / Authorization Server LDAP ExternalNetwork Database/Log Server Protected Data CenterExternal Network Web Server File Server Internet Users 1 2 3 4 5 6 7 8 9 0 POS Device Mobile Users Load Balancer TLS TLS DLL VISA GOAL: * Identify missing Security Controls; * Risk Rank Threats; * Recommend architecture updates CRITICAL HIGH MEDIUM Risk Ranking
- 10.